$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0ecd7d67-e1f5-3da6-b9f7-1134e235bd4a.roa File: 0ecd7d67-e1f5-3da6-b9f7-1134e235bd4a.roa (raw, json) Hash identifier: 0/uM84FOQzbaFinXHoyEeDUT5G9LGr0Lye2L8kXQebQ= Subject key identifier: 80:91:3F:AE:E1:E5:35:57:FB:80:6D:8D:9C:22:DC:43:4B:C4:18:21 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D5CB4F82A3AD2B276D970B700 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0ecd7d67-e1f5-3da6-b9f7-1134e235bd4a.roa Signing time: Wed 01 Apr 2026 13:00:30 +0000 ROA not before: Wed 01 Apr 2026 13:00:30 +0000 ROA not after: Tue 30 Jun 2026 13:00:30 +0000 asID: 23473 IP address blocks: 68.234.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:b4:f8:2a:3a:d2:b2:76:d9:70:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Apr 1 13:00:30 2026 GMT Not After : Jun 30 13:00:30 2026 GMT Subject: CN=a050fdb7-a748-4ac6-9bca-a62c88a3d051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1d:79:7d:de:3c:ab:44:a7:75:ea:ed:6e:49: 70:4e:f6:0a:96:ef:b3:cf:50:8e:1d:d9:18:b3:0d: 22:4d:a6:64:ef:af:ed:3b:0a:27:73:f5:cd:60:7d: 22:87:f9:5e:b7:59:ae:a2:46:d8:79:0b:18:fb:8f: f5:91:d5:47:11:c1:f9:df:39:a4:52:c4:19:c0:3a: 77:c4:c1:41:4b:8e:97:d1:95:2c:54:3f:97:82:35: bc:56:f6:8c:65:b1:1a:2e:b5:98:71:d5:f0:86:84: bd:b2:6f:3f:6d:7d:27:5b:69:df:e6:b5:9b:dd:3e: 29:ed:a0:3f:cc:de:e7:dc:c2:36:dc:69:39:7d:87: d9:27:fb:23:6f:b0:87:ab:25:c4:c5:67:06:03:eb: 35:05:f6:8b:63:e7:41:70:63:57:42:38:34:89:5c: f3:cd:93:4e:5e:99:f6:75:d3:e7:ac:cf:66:a2:5b: 3b:fe:12:b6:98:14:1c:74:96:64:13:a3:93:bd:55: 03:b7:f2:b4:42:23:76:6e:ce:1a:ca:76:6b:ab:12: 38:4b:0c:8a:11:dd:f8:7f:c0:c1:63:3c:03:5d:f7: 67:fb:0a:0f:7d:de:55:ee:d1:09:45:6f:80:e5:51: cc:ed:41:f2:89:9c:70:e6:8e:d8:51:f8:a5:06:6d: 73:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:91:3F:AE:E1:E5:35:57:FB:80:6D:8D:9C:22:DC:43:4B:C4:18:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0ecd7d67-e1f5-3da6-b9f7-1134e235bd4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:cd:e4:a7:8c:5d:f4:46:ae:22:77:fd:8a:40:8a:92:8a:3e: 3a:df:41:5e:96:13:ac:e9:62:ef:dc:7c:91:64:6b:0c:c2:0e: 94:bb:00:5d:7a:cd:f3:d5:79:73:49:a7:a3:b3:f3:bf:7b:1a: b4:3f:ec:f6:ca:9f:44:15:e5:36:15:57:11:18:41:79:9a:1f: 6a:3f:30:26:6c:bd:cd:5b:23:78:6e:02:67:65:34:bb:c1:d6: 04:5d:4c:1e:44:94:b4:96:91:1a:28:8d:99:ad:df:65:ab:2b: 1e:6d:5e:c6:8f:d4:0e:d0:bd:01:46:2e:f0:b5:03:29:bf:9e: c1:47:22:20:d9:fd:cb:3d:48:8d:39:b8:26:32:d0:ec:91:38: 77:56:14:4f:5a:fa:ff:58:58:bc:57:13:ae:5a:90:ad:95:7a: 49:1c:d9:48:23:08:48:4f:11:92:80:41:da:e8:57:97:16:43: 3e:cc:6d:1d:03:64:dc:0b:7b:b2:44:6a:38:f1:ec:00:b7:4c: 65:4a:bc:16:be:bf:6f:57:97:eb:8b:37:cc:4c:4f:1c:36:ce: 32:f0:81:2f:7c:f7:54:6b:09:de:84:6a:02:f7:7d:cc:d3:4b: 4a:0f:f1:61:18:2d:43:5c:ad:c9:1f:69:a3:2a:ca:91:b7:da: f0:3e:7a:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ctPgqOtKydtlwtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk YTA1MGZkYjctYTc0OC00YWM2LTliY2EtYTYyYzg4YTNkMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph15fd48q0SndertbklwTvYKlu+zz1COHdkY sw0iTaZk76/tOwonc/XNYH0ih/let1muokbYeQsY+4/1kdVHEcH53zmkUsQZwDp3 xMFBS46X0ZUsVD+XgjW8VvaMZbEaLrWYcdXwhoS9sm8/bX0nW2nf5rWb3T4p7aA/ zN7n3MI23Gk5fYfZJ/sjb7CHqyXExWcGA+s1BfaLY+dBcGNXQjg0iVzzzZNOXpn2 ddPnrM9mols7/hK2mBQcdJZkE6OTvVUDt/K0QiN2bs4aynZrqxI4SwyKEd34f8DB YzwDXfdn+woPfd5V7tEJRW+A5VHM7UHyiZxw5o7YUfilBm1zJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICRP67h5TVX+4BtjZwi3ENLxBghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMGVjZDdkNjctZTFmNS0z ZGE2LWI5ZjctMTEzNGUyMzViZDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROqxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPN5KeMXfRGriJ3/YpAipKKPjrfQV6WE6zpYu/cfJFkawzCDpS7AF16 zfPVeXNJp6Oz8797GrQ/7PbKn0QV5TYVVxEYQXmaH2o/MCZsvc1bI3huAmdlNLvB 1gRdTB5ElLSWkRoojZmt32WrKx5tXsaP1A7QvQFGLvC1Aym/nsFHIiDZ/cs9SI05 uCYy0OyROHdWFE9a+v9YWLxXE65akK2Vekkc2UgjCEhPEZKAQdroV5cWQz7MbR0D ZNwLe7JEajjx7AC3TGVKvBa+v29Xl+uLN8xMTxw2zjLwgS9891RrCd6EagL3fczT S0oP8WEYLUNcrckfaaMqypG32vA+ero= -----END CERTIFICATE-----Generated at Fri Apr 17 11:34:27 2026 by rpki-client